[From nobody Tue Oct 13 20:11:08 2026 Received: (at 1150337-close) by bugs.debian.org; 13 Oct 2026 19:08:34 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 218; hammy, 150; neutral, 447; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:44242) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xGhrV-003fVj-3B for 1150337-close@bugs.debian.org; Tue, 13 Oct 2026 19:08:34 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xGhrU-004pjZ-1w for 1150337-close@bugs.debian.org; Tue, 13 Oct 2026 19:08:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=YiNOk6Q/xIHMviuhbpXvNX/m8zYHrjaQff+dZMXdgqQ=; b=tt1ckS2yNV/gQMdM+Dx7C6Emhb /EguKnoNAy6vT2tiJ/Bhl5eZltcRos1lUGIho0D5atBEJ4V/+PaFo+UTDbIUTIN0Shwji3+rz+kdd gKR99h4DNcN26bbEkR5oDic4X6R4BBZiv9dxTp8reFQbxHmFIx7G6ywtqfl0nS0z2qJ7Fe/wmuKar 8LLI3X68t9g6GFfMpWQcThi3OP5KDy87vzvzcO42LzD/D/KEYq6AxXStH6YTlgLNX+d+Cmk0tyIY8 D4ZrHBv5y0vYrjnAywPw+b7ocvsZbqaw0kHiBBhrV3AoO6Gt4UvyqKdqZYMfywzuvSkXb9VG2eWzL 4iTgyw7w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xGhrT-0000000H3vb-3L9a; Tue, 13 Oct 2026 19:08:31 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Bastien_Roucari=C3=A8s?= <rouca@debian.org> To: 1150337-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: imagemagick Debian: DAK Debian-Changes: imagemagick_7.1.2.33+dfsg1-1_source.changes Debian-Source: imagemagick Debian-Version: 8:7.1.2.33+dfsg1-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1150337: fixed in imagemagick 8:7.1.2.33+dfsg1-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8711877910039090909==" Message-Id: <E1xGhrT-0000000H3vb-3L9a@fasolo.debian.org> Date: Tue, 13 Oct 2026 19:08:31 +0000 X-CrossAssassin-Score: 2 --===============8711877910039090909== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: imagemagick Source-Version: 8:7.1.2.33+dfsg1-1 Done: Bastien Roucari=C3=A8s <rouca@debian.org> We believe that the bug you reported is fixed in the latest version of imagemagick, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1150337@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Bastien Roucari=C3=A8s <rouca@debian.org> (supplier of updated imagemagick pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Oct 2026 19:34:56 +0200 Source: imagemagick Architecture: source Version: 8:7.1.2.33+dfsg1-1 Distribution: unstable Urgency: high Maintainer: ImageMagick Packaging Team <pkg-gmagick-im-team@lists.alioth.debi= an.org> Changed-By: Bastien Roucari=C3=A8s <rouca@debian.org> Closes: 1150337 1150802 Changes: imagemagick (8:7.1.2.33+dfsg1-1) unstable; urgency=3Dhigh . * New upstream version (Closes: #1150337, #1150802) * Fix CVE-2026-102635: ImageMagick contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information. * Fix CVE-2026-105083: A policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in ']>' makes the parser consume the rest of the file, so no policy rules are applied and restricted operations become allowed. * Fix CVE-2026-106564: A crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. * Fix CVE-2026-106565: A missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. * Fix CVE-2026-106566: Delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environm= ent variable, allowing a local privileged workflow to overwrite a file with = random data. * Fix CVE-2026-106567: A crafted PSD file can trigger an integer-conversion error in the PSD de= coder on 32-bit builds, causing an infinite loop and denial of service. * Fix CVE-2026-106568: A crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. * Fix CVE-2026-106569: A missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. * Fix CVE-2026-106570: An unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. * Fix CVE-2026-109258: An invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes. * Fix CVE-2026-109259: An uninitialized memory read in the TGA image decoder that can expose memory contents. * Fix CVE-2026-109260: A memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. * Fix CVE-2026-109261: A memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. * Fix CVE-2026-109262: A memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. * Fix CVE-2026-109263: A memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. * Fix CVE-2026-109264: An uncontrolled recursion in the MVG decoder that can exhaust the progra= m stack. * Fix CVE-2026-109265: A heap buffer over-read vulnerability that allows attackers to read beyo= nd allocated memory due to incorrect string termination in XMP profiles. * Fix CVE-2026-109266: An XML injection vulnerability in the CIP encoder, which does not proper= ly escape input-derived data when writing Cisco IP Phone XML output. * Fix CVE-2026-109267: A stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service. * Fix CVE-2026-109268: An use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. * Fix CVE-2026-109269: An information disclosure vulnerability in the JPEG decoder, which perfo= rms a read that exposes uninitialized memory when handling crafted input. * Fix CVE-2026-109270: A memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. * Fix CVE-2026-109271: A use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. * Fix CVE-2026-109272: A NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. * Fix CVE-2026-109273: An information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. * Fix CVE-2026-109274: A time-of-check time-of-use symlink race vulnerability that allows attac= kers to bypass the path security policy when executing a magick script. * Fix CVE-2026-109275: a code injection vulnerability in the MVG decoder when a PostScript rend= erer is used. * Fix CVE-2026-109276: An incomplete cleanup flaw in the JNG decoder that fails to remove tempo= rary files when processing crafted input. * Fix CVE-2026-109277: A policy bypass vulnerability in the -script operation due to missing ch= ecks on file descriptor handling. * Fix CVE-2026-109278: A memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. * Fix CVE-2026-109279: A lack of proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. * Fix CVE-2026-109280: A use after free vulnerability in the -fx option that occurs when a memo= ry allocation fails during a specific operation. * Fix CVE-2026-109281: A heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. * Fix CVE-2026-109282: A type confusion flaw in the INFO, JSON and YAML encoders, where an inte= rnal method receives a pointer of an unexpected type when writing an image in a compressed format. Checksums-Sha1: 5f049ca8f4fb2a1b7a28a04ce646b411e071316d 5227 imagemagick_7.1.2.33+dfsg1-1.d= sc a0b00e84738e7c7dc86f0a2f8dbb5c6c690f896f 10263656 imagemagick_7.1.2.33+dfsg1= .orig.tar.xz 8f765c74ed79d57868f203c7c3300dfc2eda26f2 281112 imagemagick_7.1.2.33+dfsg1-1= .debian.tar.xz 507dfeb51f113cbec69d263874a158c446cdee22 9021 imagemagick_7.1.2.33+dfsg1-1_s= ource.buildinfo Checksums-Sha256: b0e639e2697b83ad2dacf29151849994c050ab124920fff81d3d087f31305058 5227 imagem= agick_7.1.2.33+dfsg1-1.dsc f81d36085df6e12d44dc8866ef845f036483f33a6a32e16941fab1baf438c3b4 10263656 im= agemagick_7.1.2.33+dfsg1.orig.tar.xz 482549c010f6aa3077feffc7b069dcd02cc0062dfeeca1b7e1b376ddd682ed3c 281112 imag= emagick_7.1.2.33+dfsg1-1.debian.tar.xz 279c8309ef9baf92d0c3b99a2c20634e5182822f7cde0f56c2ac35058ff91fcf 9021 imagem= agick_7.1.2.33+dfsg1-1_source.buildinfo Files: 9a576d4ecb182b6bb63ac7ec24aec9c2 5227 graphics optional imagemagick_7.1.2.33= +dfsg1-1.dsc 290e5b1d1910883188e002c4731bffd7 10263656 graphics optional imagemagick_7.1.= 2.33+dfsg1.orig.tar.xz a81d37fb7adacbd25d1a40180e9e0d0f 281112 graphics optional imagemagick_7.1.2.= 33+dfsg1-1.debian.tar.xz d3c05fd074ddb3729c97983f0dd3f1e6 9021 graphics optional imagemagick_7.1.2.33= +dfsg1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJqzn77CRAAOhotqkEIX0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmf23bsVanMTykBaT43j4DUzJY/u94YSYHqToPQ+68tu ehYhBF0Bh7lAokW617D1agA6Gi2qQQhfAAAf1w/8Dma6vmuO/TALGKAHx7EdvzcT cBd7SwYTZ+iok36Xbxdfbj8xsYfbnzvBgF07ARg356GDYHuizz/bxFqSsfLtxf6o yfMdfJ+Wm6ML5AV5r16PGcaxx7mpW43gyy52Sj5ceUt4kAgTRFbuJTbcm9ByzrV3 T4E6UKR7XfoqJgPEJ8BoIu/orzAR9K+WuzuBIjsPk5BaHSQpsZc/PO/sRhXwqAnN Z0s/TmSwylvqu4hHI71zB8jdXgF9u+uhxDKEgrMaghX8xTzpTHsKzB7mbfVfHIIu Eh1BQTWpu4In0/SJJJfjWWqA10gVABb+lr3F/Y0zC9NWcxhU106vNd1G+ZWmi8Ig RPhSsIiECr+fDF8U4gaZmDuZUWsqQjMTzvNoRg82ats15aalVSTgNQtrqCnckhr2 NfNeozGRgpGSDt81x8Y5CpomUC6ei8dgLsLlwp3+5u34yNfoGgjAhzicCXQhh+cO MfJh+0b4JR1oPfzcTYyqDzp0ltwAwPSnj/I3sTlscLrNnLkoPqiCMIGY3ue5TKnn tj/2R+XICdiL5vPA3EgQiBVIZF/9ZRIIaRGXqTGhCcXKji7rr/8SJiHIz+3ZQQvU mBfmLoInhwgorRRLSKQo6FSdJw3q1xx/CUeSGzP385mvkf6fZ/+iLq8Ljj7xusFx Xrlmn1a51XlqjgAMdkw=3D =3DQxEW -----END PGP SIGNATURE----- --===============8711877910039090909== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCas6BrwAKCRCb9qggYcy5 IZQOAQD5nVoP3ff4PHzDPHDfIDAQdLuaw9dd8cLqaYG52GgPbwEAsGAC95l9ey8T VHOT5FqD8l4+Cb8suYozzcA+QyJTWAg= =NSnf -----END PGP SIGNATURE----- --===============8711877910039090909==-- ]